
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
File: 43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa (raw, json)
Hash identifier: nsJSCBC8ckBnVpTXn2UhExT3ubN1QfPWpQnkUhNvrfM=
Subject key identifier: 44:E2:0A:78:B7:F2:C8:03:6D:43:24:B6:1E:CC:09:70:DC:AD:2D:82
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D1707EC8009BBAD1F89B3A580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 30036
IP address blocks: 173.31.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:ec:80:09:bb:ad:1f:89:b3:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=3cc9b8af-8b0d-462b-8794-ee24ec6c4876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:0c:38:75:73:f8:8f:28:71:5a:0b:4e:cd:
98:2f:90:3a:9e:0c:6d:a6:f4:c4:97:59:f7:c0:e5:
6f:15:ee:b3:23:5d:a4:52:d5:87:a2:e7:e9:35:cd:
2e:ed:19:f0:e3:62:a5:34:fc:db:60:ed:1e:5c:4f:
b4:ea:4a:b7:2c:84:c5:2f:a8:14:33:72:d6:d5:00:
9c:37:3d:5a:4d:de:0b:2a:ae:77:10:42:12:94:49:
53:08:d7:46:0c:d4:2c:be:6d:e3:d5:f6:b2:ef:6e:
71:c5:0a:e7:23:71:17:bc:fd:ff:33:93:e0:9c:98:
88:46:66:a8:b7:40:8c:91:30:44:2d:46:30:e4:c1:
85:7f:fc:ec:71:48:b5:58:0d:cc:d3:63:52:be:a9:
8e:d2:dd:f8:3d:46:5d:8c:09:c9:25:b9:7f:68:54:
61:33:ab:8d:28:5d:18:b6:d5:94:73:2d:97:bf:ab:
e0:8f:aa:37:31:74:15:20:c7:14:2f:46:78:2f:b0:
4d:64:75:72:10:00:39:0c:92:78:9d:44:3a:6e:73:
dc:c7:ff:34:e2:1a:e0:4a:b8:dc:15:4f:a9:59:a8:
e4:76:d6:12:6f:7c:cd:af:38:74:a3:6d:93:46:8c:
db:52:52:33:77:41:fb:de:99:3b:f2:9c:1e:9f:b2:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:0A:78:B7:F2:C8:03:6D:43:24:B6:1E:CC:09:70:DC:AD:2D:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:65:c7:87:a2:28:0e:78:45:cc:7e:29:1d:61:90:3d:cb:68:
02:8c:dc:b9:ca:0f:03:79:43:2c:8b:bd:a3:ba:a3:45:68:db:
32:8a:3d:f1:6d:cc:6a:c4:7d:7b:d8:aa:cf:2a:68:d4:a6:9f:
a1:f3:ff:7f:5b:78:ac:37:9c:af:ff:fc:92:59:16:52:dc:e1:
ad:0d:f4:7d:99:db:82:31:59:69:29:26:a3:3e:c9:2b:cd:f0:
ee:5f:dd:05:12:67:b2:cc:59:e4:f4:a9:d0:96:80:2d:0a:71:
83:2a:77:85:50:1e:cf:a7:82:53:dd:bd:93:b8:ef:dd:c4:a9:
6c:57:d9:c0:52:83:7d:55:61:f4:12:a6:bd:35:46:a7:7a:4a:
c0:0a:fd:3e:e9:ee:21:87:79:e2:45:56:5f:a7:1b:f3:24:76:
0e:bf:0e:33:62:05:c2:fd:3d:2f:fc:57:22:9e:48:b0:e8:02:
7b:56:a6:b0:b0:fc:8c:8a:b7:14:e2:0c:02:f7:ac:cf:5f:d3:
8b:b3:8c:7a:a9:58:a8:5c:f0:3b:6b:6d:31:c9:9b:38:a2:47:
6f:6d:55:5c:95:4a:35:6b:cf:b7:6c:c0:91:c0:a7:16:37:d4:
b1:af:db:d9:5d:41:23:ae:f2:a7:e2:d5:3c:72:fe:6f:f7:cd:
eb:79:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:21 2026 by rpki-client